0430e70619ed9b2730d74144519c294d | Triage

Sharing

General

Target

0430e70619ed9b2730d74144519c294d
Size

128KB
MD5

0430e70619ed9b2730d74144519c294d
SHA1

85dd2f5e62529a863c01cc9552f78dddd1b18c62
SHA256

757651cf556b287863626c0bbe3c4fb1e7368c022ef492cf900e14c95dab7285
SHA512

fda484f87821a52e4aaab82dc8261bebcda7de33638391c25ccf54f955efb63a031dc6c29033a0b6f0793782ebd5bd73aa7ee34c96b2d0e74730990d9548775e
SSDEEP

3072:qtcdLqiGRSfT4LRSeAptEj9/69GvWFbxlvSYZLFTWEobO:UcdLeSfT4GbEjRAGvUvSYHTW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0430e70619ed9b2730d74144519c294d

Files

0430e70619ed9b2730d74144519c294d
.exe windows:4 windows x86 arch:x86

dcbe64c2205f3ac23685dd118f8ab6ed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetStartupInfoA

user32

GetWindowRect
EnableWindow
FillRect
BeginPaint

gdi32

CreateFontIndirectA

oleaut32

GetErrorInfo
SysAllocStringLen

msvcrt

_controlfp
_except_handler3
__set_app_type
strcmp
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_strrev

Sections

.text
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 774B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE